156-560 Online Practice Questions and Answers

Which of these Cloud Platforms support User Defined Route (UDR) to force traffic destined for spoke networks to go through a network virtual appliance

A. Amazon AWS

B. Google Cloud Platform

C. Amazon AWS and Google Cloud Platform

D. Microsoft Azure

In a CloudGuard deployment, what does the acronym IAM stand for?

A. Information and Adaptability Measures

B. IP Address Management

C. Identity and Access Management

D. Instant Access Management

Which hub serves as the front end of the Workload that permits inbound web communications such as HTTP traffic from the Internet to reach spoke Workloads?

A. Web Hub

B. Southbound Hub

C. East-West Hub

D. Northbound Hub

Which APIs are used by Public clouds and Hybrid clouds to support the interactions between cloud resources, on- premises equipment, scripts, orchestration playbooks and CloudGuard Network cloud resources, on- premise equipment, scripts.

A. CloudGuard Management Extension API (CME-API)

B. CloudGuard Controller API (CG-API)

C. Representational State Transfer (REST) APIs

D. Cloud Security Posture Management (CSPM)

What platform provides continuous compliance and governance assessments that evaluate public infrastructure according to industry to industry standards and best practices?

A. Cloud Security Posture Management

B. CloudGuard laaS Public Cloud

C. CloudGuard SaaS

D. CloudGuard laaS Private Cloud

Can you configure NAT for internal VM's on the Check Point Gateway in AWS?

A. Yes, you can add public IP's to the Check Point

B. No. ail the NAT is being done by the ELB

C. No, the public IPs are defined directly on the in

D. Yes, the NAT is only defined for internal LB

Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?

A. SmartConsole

B. HTML

C. CLI

D. APIs

What can a Security Admin do in a situation where collecting additional log file information to examine a CloudGuard Controller issue is required?

A. Execute a debug on the SMS

B. Set the operation to TRACE to collect more data.

C. Verify connectivity between the SMS and the SDDC.

D. Search for the information in the objects database.

Which CloudGuard security platform enables organizations to view and access their security posture, find cloud misconfigurations, and enforce best practices?

A. CloudGuard laaS Private Cloud Solution

B. CloudGuard SaaS

C. CloudGuard Security Posture Management

D. CloudGuard laaS Public Cloud Solution

What is Cloud Security according to the Five Pillars?

A. The ability to support development and run workloads effectively

B. The ability of a Workload to function correctly and consistently in all expected

C. The ability to use cloud resources efficiently for meeting system requirements, and maintaining that efficiency as demands changes and technologies evolve

D. In terms of tie cloud, security is about architecting every workload to prevent